EtreCheckPro version: 6.6.1 (66021) Report generated: 2022-07-20 20:42:56 Download EtreCheckPro from https://etrecheck.com Runtime: 3:04 Performance: Excellent Problem: Other problem Description: I get this error pop up window every 15 seconds The application canâ t be opened -50 Major Issues: Anything that appears on this list needs immediate attention. No Time Machine backup - Time Machine backup not found. Unsigned files - There are unsigned software files installed that could be malicious and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by malware. Heavy RAM usage - Apps are using a large amount of RAM. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Kernel extensions present - This computer has kernel extensions that may not work in the future. Sharing enabled - This computer has sharing services enabled that could be a security risk. Hardware Information: MacBook Pro (16-inch, 2019) MacBook Pro Model: MacBookPro16,1 2.6 GHz 6-Core Intel Core i7 (i7-9750H) CPU: 6-core 16 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2667 BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2667 Battery: Health = Normal - Cycle count = 88 Video Information: Intel UHD Graphics 630 - VRAM: 1536 MB AMD Radeon Pro 5300M - VRAM: 4 GB Color LCD (built-in) 3584 x 2240 HP 2509 1920 x 1080 Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 135.82 GB used) disk1s2 - Preboot (APFS) [APFS Preboot] (Shared - 275 MB used) disk1s3 - Recovery (APFS) [Recovery] (Shared - 1.12 GB used) disk1s4 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk1s5 (APFS) [APFS Container] (Shared - 15.23 GB used) disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.23 GB used) disk1s6 - Update (APFS) (Shared - 414 KB used) Mounted Volumes: disk1s1 - Macintosh HD - Data [APFS Virtual drive] 499.96 GB (Shared - 135.82 GB used, 350.99 GB available, 347.36 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s2 - Preboot [APFS Preboot] 499.96 GB (Shared - 275 MB used, 347.36 GB free) APFS Mount point: /System/Volumes/Preboot disk1s4 - VM [APFS VM] 499.96 GB (Shared - 20 KB used, 347.36 GB free) APFS Mount point: /System/Volumes/VM disk1s5s1 - Macintosh HD [APFS Snapshot] 499.96 GB (Shared - 15.23 GB used, 350.99 GB available, 347.36 GB free) APFS Mount point: / Read-only: Yes disk1s6 - Update 499.96 GB (Shared - 414 KB used, 347.36 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en5: USB 10/100/1000 LAN Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface bridge0: Thunderbolt Bridge Remote login: Enabled System Software: macOS Monterey 12.4 (21F79) Time since boot: About 3 hours Configuration Profiles: com.microsoft.rdc.macos - ClientSettings.FirstRunExperienceLaunchedVersion com.microsoft.rdc.macos - ClientSettings.DisableTelemetryUpload com.microsoft.errorreporting - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.Powerpoint - kFRETelemetryConsentKey com.microsoft.Powerpoint - SendASmileEnabled com.microsoft.Powerpoint - SendAllTelemetryEnabled com.microsoft.Powerpoint - kFREEnterpriseTelemetryInfoKey com.microsoft.Powerpoint - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.autoupdate2 - DisableInsiderCheckbox com.microsoft.autoupdate2 - UpdateCheckFrequency com.microsoft.autoupdate2 - HowToCheck com.microsoft.autoupdate2 - SendAllTelemetryEnabled com.microsoft.autoupdate2 - ChannelName com.microsoft.autoupdate2 - Applications com.microsoft.autoupdate2 - AcknowledgedDataCollectionPolicy com.microsoft.autoupdate2 - UpdateDeadline.DaysBeforeForcedQuit com.microsoft.autoupdate2 - StartDaemonOnAppLaunch com.microsoft.autoupdate2 - EnableCheckForUpdatesButton com.microsoft.Office365ServiceV2 - SendAllTelemetryEnabled com.microsoft.autoupdate.fba - SendAllTelemetryEnabled com.microsoft.onenote.mac - kFRETelemetryConsentKey com.microsoft.onenote.mac - SendASmileEnabled com.microsoft.onenote.mac - SendAllTelemetryEnabled com.microsoft.onenote.mac - kFREEnterpriseTelemetryInfoKey com.microsoft.onenote.mac - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.Excel - kFRETelemetryConsentKey com.microsoft.Excel - SendASmileEnabled com.microsoft.Excel - SendAllTelemetryEnabled com.microsoft.Excel - kFREEnterpriseTelemetryInfoKey com.microsoft.Excel - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.office - OfficeAutoSignIn com.microsoft.office - DiagnosticDataTypePreferecne com.microsoft.office - TermsAccepted1809 com.microsoft.office - DefaultsToLocalOpenSave com.microsoft.Outlook - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.Outlook - kFREEnterpriseTelemetryInfoKey com.microsoft.Outlook - SendAllTelemetryEnabled com.microsoft.Outlook - DisableSkypeMeeting com.microsoft.Outlook - o365GroupsOobePromoTriggeredPref com.microsoft.Outlook - DisableTeamsMeeting com.microsoft.Outlook - TrustO365AutodiscoverRedirect com.microsoft.Outlook - AutomaticallyDownloadExternalContent com.microsoft.Outlook - SendASmileEnabled com.microsoft.Outlook - googlePromoTriggeredPref com.microsoft.Outlook - kFRETelemetryConsentKey com.microsoft.Word - kFRETelemetryConsentKey com.microsoft.Word - SendASmileEnabled com.microsoft.Word - SendAllTelemetryEnabled com.microsoft.Word - kFREEnterpriseTelemetryInfoKey com.microsoft.Word - SendCrashReportsEvenWithTelemetryDisabled com.microsoft.office - OfficeAutoSignIn com.microsoft.office - OfficeActivationEmailAddress com.apple.MCX - dontAllowFDEDisable com.apple.Safari.SandboxBroker - Homepage com.google.Chrome - ShowHomeButton com.google.Chrome - HomepageLocation com.google.Chrome - NewTabPageLocation com.google.Chrome - RestoreOnStartup com.google.Chrome - RestoreOnStartupURLs com.google.Chrome - LastRunAppBundlePath com.google.Chrome - DefaultBrowserSettingEnabled com.google.Chrome - HomepageIsNewTabPage com.apple.Safari - HomePage com.apple.Safari - NewTabBehavior com.apple.Safari - NewWindowBehavior com.apple.Safari - AlwaysRestoreSessionAtLaunch com.apple.desktopservices - DSDontWriteNetworkStores com.apple.SetupAssistant.managed - SkipCloudSetup com.apple.SetupAssistant.managed - SkipSiriSetup com.apple.dock - checked-for-dashboard com.apple.timezone.auto - Active com.apple.SetupAssistant - DidSeeSiriSetup com.apple.TimeMachine - DoNotOfferNewDisksForBackup com.apple.MCX - forceInternetSharingOff .GlobalPreferences - CSUIDisable32BitWarning com.apple.Enterprise-Connect - setupReminderNagInterval com.apple.Enterprise-Connect - checkForNetworkType com.apple.Enterprise-Connect - orgUsernameLabel com.apple.Enterprise-Connect - pwReqComplexityDisableUnicode com.apple.Enterprise-Connect - connectReminderTime com.apple.Enterprise-Connect - pwReqLength com.apple.Enterprise-Connect - pwReqComplexity com.apple.Enterprise-Connect - syncLocalPassword com.apple.Enterprise-Connect - mountNetworkHomeDirectory com.apple.Enterprise-Connect - pwReqHistoryCount com.apple.Enterprise-Connect - adRealm com.apple.Enterprise-Connect - orgLogoPath com.apple.Enterprise-Connect - disableQuitMenu com.apple.Enterprise-Connect - launchAtLogin com.apple.Enterprise-Connect - connectReminderNagInterval com.apple.Enterprise-Connect - passwordNotificationDays com.apple.Enterprise-Connect - alwaysGetNewTicket nonADdevices - email Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple Remote login: Enabled Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveStandaloneUpdaterDaemon.plist Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.startupItem.plist Executable: /Library/Application Support/JAMF/ManagementFrameworkScripts/StartupScript.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.resources.det.places.plist Executable: /bin/sh /Library/Management/Scripts/placesStartupConfig.sh Launchd: /Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.OneDriveUpdaterDaemon.plist Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon Details: Exact match found in the legitimate list - probably OK Apps: 2 Old Applications: 7 x86-only apps System Extensions: [Running] GlobalProtectExtension - version 5.2.11-10 (Palo Alto Networks - 2022-03-01) Application: /Applications/GlobalProtect.app - version 5.2.11-10 (Palo Alto Networks - 2022-06-02) Description: System Extensions for GlobalProtect Split Tunnel and Enforcer [Running] Agent - version 6.41 (CrowdStrike Inc. - 2022-07-08) Application: /Applications/Falcon.app - version 6.41 (CrowdStrike Inc. - 2022-06-02) Description: CrowdStrike Falcon sensor requires the use of a SystemExtension [Running] Cisco AnyConnect Socket Filter Extension - version 4.9.04043 (Cisco - 2020-11-12) Application: /Applications/Cisco/Cisco AnyConnect Socket Filter.app - version 4.9.04043 (Cisco - 2022-06-20) Description: This system extension provides socket filter capabilities. Kernel Extensions: /Applications/Falcon.app [Not Loaded] Agent.kext - com.crowdstrike.sensor (6.41 - SDK 10.17) /Applications/GlobalProtect.app [Not Loaded] gplock.kext - com.paloaltonetworks.GlobalProtect.gplock (5.2.11 - SDK 10.10) [Not Loaded] gpsplit.kext - com.paloaltonetworks.GlobalProtect.gpsplit (5.2.11 - SDK 10.10) [Not Loaded] pangpd.kext - com.paloaltonetworks.kext.pangpd (5.2.11 - SDK 10.10) /Library/Application Support/Cisco/AnyConnect Secure Mobility Client [Not Loaded] acsock.kext - com.cisco.kext.acsock (4.9.40 - SDK 10.14) System Launch Daemons: [Not Loaded] 34 Apple tasks [Loaded] 187 Apple tasks [Running] 158 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 193 Apple tasks [Running] 147 Apple tasks Launch Daemons: [Running] com.checkpoint.cpcmpld.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.checkpoint.cpdaApp.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.checkpoint.cpfwd.plist (Check Point Software Technologies - installed 2022-06-02) [Other] com.checkpoint.efr-mon-epsec.plist (Not signed - installed 2022-06-02) [Running] com.checkpoint.epc.service.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.cirrato.cirratod.plist (Levi, Ray & Shoup, Inc. - installed 2022-06-02) [Other] com.cisco.anyconnect.ciscod.plist (Not signed - installed 2022-06-20) [Running] com.cisco.anyconnect.ciscod64.plist (Cisco - installed 2022-06-20) [Running] com.cisco.anyconnect.vpnagentd.plist (Cisco - installed 2022-06-20) [Loaded] com.google.keystone.daemon.plist (Google LLC - installed 2022-06-15) [Running] com.jamf.management.daemon.plist (JAMF Software - installed 2022-06-11) [Not Loaded] com.jamfsoftware.startupItem.plist (Not signed - installed 2022-07-20) [Loaded] com.jamfsoftware.task.1.plist (JAMF Software - installed 2022-07-20) [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Not signed - installed 2022-06-02) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Not signed - installed 2022-06-02) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2022-07-14) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2022-06-02) [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2022-07-06) [Not Loaded] com.paloaltonetworks.gp.pangpsd.plist (Palo Alto Networks - installed 2022-06-02) [Running] com.publicisgroupe.Nudge.logger.plist (Apple - installed 2022-06-03) [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2022-06-04) Launch Agents: [Running] com.apple.ecAgent.plist (Apple - installed 2022-06-02) [Running] com.checkpoint.eps.gui.plist (Check Point Software Technologies - installed 2022-06-02) [Loaded] com.checkpoint.eps.upgrader.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.checkpoint.epsgui.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.checkpoint.user.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.checkpoint.usercheck.plist (Check Point Software Technologies - installed 2022-06-02) [Running] com.cirrato.CirratoHelper.plist (Levi, Ray & Shoup, Inc. - installed 2022-06-02) [Running] com.cisco.anyconnect.aciseposture.plist (Cisco - installed 2022-06-20) [Loaded] com.cisco.anyconnect.gui.plist (Cisco - installed 2022-06-20) [Loaded] com.cisco.anyconnect.notification.plist (Cisco - installed 2022-06-20) [Running] com.crowdstrike.falcon.UserAgent.plist (CrowdStrike Inc. - installed 2022-07-08) [Loaded] com.github.macadmins.Nudge.plist (Clever DevOps Co. - installed 2022-06-03) [Loaded] com.google.keystone.agent.plist (Google LLC - installed 2022-06-15) [Loaded] com.google.keystone.xpcservice.plist (Google LLC - installed 2022-06-15) [Loaded] com.jamf.management.agent.plist (JAMF Software - installed 2022-07-20) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Not signed - installed 2022-06-02) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2022-07-14) [Running] com.paloaltonetworks.gp.pangpa.plist (Palo Alto Networks - installed 2022-06-02) [Running] com.paloaltonetworks.gp.pangps.plist (Palo Alto Networks - installed 2022-06-02) [Loaded] com.publicisgroupe.Nudge.plist (Clever DevOps Co. - installed 2022-06-03) [Loaded] com.resources.det.places.plist (Not signed - installed 2022-06-02) User Login Items: [Running] Places (LION RE:SOURCES, INC. - installed 2022-06-02) Application ~/Applications/Places.app Audio Plug-ins: MSTeamsAudioDevice: 2020.42.00.9 (Microsoft Corporation - installed 2020-10-13) 3rd Party Preference Panes: Cirrato (Levi, Ray & Shoup, Inc. - installed 2022-06-02) Backup: Time Machine Not Configured! Performance: System Load: 2.25 (1 min ago) 2.38 (5 min ago) 2.46 (15 min ago) Nominal I/O usage: 0.32 MB/s File system: 21.11 seconds Write speed: 2298 MB/s Read speed: 2839 MB/s CPU Usage Snapshot: Type Overall System: 1 % User: 4 % Idle: 95 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) WindowServer 18.98 % (Apple) UserServer (2) 15.40 % (Check Point Software Technologies) EtreCheckPro 15.12 % (Etresoft, Inc.) Finder 8.48 % (Apple) Activity Monitor 6.58 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (23) 2.48 GB (Google LLC) MTLCompilerService (31) 850 MB (Apple) Microsoft Teams Helper (Renderer) (5) 797 MB (Microsoft Corporation) EtreCheckPro 711 MB (Etresoft, Inc.) Microsoft Outlook 698 MB (Microsoft Corporation) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) com.crowdstrike.falcon.Agent 411 KB / 2 MB (CrowdStrike Inc.) mDNSResponder 1 MB / 168 KB (Apple) biometrickitd 222 KB / 17 KB (Apple) remoted 47 KB / 60 KB (Apple) netbiosd 46 KB / 19 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 10 (Apple) Activity Monitor 2 (Apple) Endpoint Security 2 (Check Point Software Technologies) Google Chrome Helper (Renderer) (23) 1 (Google LLC) com.crowdstrike.falcon.Agent 1 (CrowdStrike Inc.) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 81 MB Used RAM: 10.99 GB Cached files: 4.93 GB Available RAM: 5.01 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2022-05-30 macOS 12.4 (12.4) 2022-06-02 QuickAdd (1.0) 2022-06-02 Groupe_Lion_Avatar_v2 (1) 2022-06-02 Cirrato for macOS (1.6.2) 2022-06-02 dockutil-3.0.2 (3.0.2) 2022-06-02 Enterprise Connect (2.0.6.1.1.1603922522) 2022-06-02 Groupe Places 3.6 (1.0) 2022-06-02 Groupe_Default_Dock_1.3_v2 (1.3) 2022-06-02 Microsoft Remote Desktop v10.7.6 (10.7.7) 2022-06-02 cmpl (872011053) 2022-06-02 fw (872011056) 2022-06-02 Endpoint_Security_VPN_integrated (986200408) 2022-06-02 Check Point Endpoint Security (872011113) 2022-06-02 Checkpoint_Harmony_Suite_Install-E86.20-Thumbprints (1) 2022-06-02 GlobalProtect (5.2.11-10) 2022-06-02 Microsoft Office (16.63.22071301) 2022-06-02 Microsoft Office Licensing Helper (0) 2022-06-03 Nudge Big Sur Image (1) 2022-06-04 Zoom (5.10.7.7748) 2022-06-04 dockutil-2.0.5 (1.0) 2022-06-15 Google Chrome (102.0.5005.115) 2022-06-16 Brave-Browser-UJW151 (0) 2022-06-20 AnyConnect Secure Mobility Client (4.9.04043) 2022-06-24 Google_Chrome_Updater-Stable (1) 2022-06-29 Microsoft Remote Desktop (10.7.7) 2022-07-06 Microsoft Teams (1.00.517261) 2022-07-08 CrowdStrike Falcon Sensor (6.41.15404.0) 2022-07-12 FirefoxML-Latest 2022-07-14 Microsoft AutoUpdate (4.49.22070801) 2022-07-14 Microsoft Outlook (16.63.22070801) 2022-07-16 Microsoft To Do (2.74) 2022-07-18 Microsoft Excel (16.63.22071301) 2022-07-18 Microsoft OneNote (16.63.22071301) 2022-07-18 Microsoft PowerPoint (16.63.22071401) 2022-07-18 Microsoft Word (16.63.22071301) 2022-07-19 MRTConfigData (1.93) 2022-07-19 XProtectPlistConfigData (2161) 2022-07-19 XProtectPayloads (65) Clean up: /Library/LaunchDaemons/com.cisco.anyconnect.ciscod.plist /opt/cisco/hostscan/bin/ciscod Executable not found /Library/LaunchDaemons/com.checkpoint.efr-mon-epsec.plist /Applications/Check Point/Agents/efr-mon-epsec.app/Contents/MacOS/efr-mon-epsec Executable not found Diagnostics Information (past 7-30 days): 2022-07-20 17:01:18 fseventsd High CPU Use Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/FSEvents.framework/Versions/A/Support/fseventsd 2022-07-20 15:27:44 WindowServer High CPU Use Executable: /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer 2022-07-20 15:27:39 com.apple.SpeechRecognitionCore.speechrecognitiond High CPU Use Executable: /System/Library/PrivateFrameworks/SpeechRecognitionCore.framework/Versions/A/XPCServices/com.apple.SpeechRecognitionCore.brokerd.xpc/Contents/XPCServices/com.apple.SpeechRecognitionCore.speechrecognitiond.xpc/Contents/MacOS/com.apple.SpeechRecognitionCore.speechrecognitiond 2022-07-20 13:53:20 Microsoft Outlook.app High CPU Use (2 times) Executable: /Applications/Microsoft Outlook.app 2022-07-20 12:26:01 /Library/Logs/DiagnosticReports/ProxiedDevice-Bridge/stacks-2022-07-20-122601.ips Crash 2022-07-20 10:23:49 signpost_reporter High CPU Use (3 times) Executable: /usr/libexec/signpost_reporter 2022-07-20 07:59:11 UserServer Crash (50 times) Executable: /Library/Application Support/Checkpoint/*/UserServer 2022-07-19 13:30:55 coreaudiod Crash Executable: /usr/sbin/coreaudiod 2022-07-18 08:07:53 suggestd High CPU Use Executable: /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd 2022-07-16 05:54:42 UARPUpdaterServiceUSBPD Crash (5 times) Executable: /System/Library/PrivateFrameworks/MobileAccessoryUpdater.framework/XPCServices/UARPUpdaterServiceUSBPD.xpc/Contents/MacOS/UARPUpdaterServiceUSBPD Details: libsystem_c.dylib: abort() called End of report